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IN THE CLAIMS 

What is claimed is: 

1 . (Currently Amended) A method for redirecting network message traffic 
comprising 

receiving an indication of undesirable message traffic directed to a particular 
target node via a first transport mechanism in a communications networi<; 

rerouting all message traffic earned via the first transport mechanism in the 
communications network, and directed to the particular target node, to a filter complex 
operable to distinguish desirable message traffic from undesirable message traffic; and 

directing the filtering complex to transmit, via a second transport mechanism over 
the communications network, the desirable message traffic to the target nod e, directino 
the filter complex further comorisina propaaatina routino information according to a 
predetermined protocol, the routine Information operable to desionate the target node 
as the des tination of the message according to the second transport mechanism . 

2. (Currently Amended) The method of claim 12 further comprising directing the 
fllterifif complex to filter the message traffic to subdivide desirable message traffic from 
undesirable message traffic. 

3. (Original) The method of claim 1 wherein the filter complex further comprises a 
security filter having filtering logic for performing filtering, the security filter operable to 
parse the message traffic and identify sequences in the message traffic indicative of 
undesirable message traffic. 

4. (Original) The method of claim 3 wherein the filter complex further includes a 
filter routing device in communication with other routing devices in the communications 
network and coupled to the security filter for analyzing message traffic. 
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5. (Original) The method of claim 4 wherein the filter routing device in the filtering 
complex is operable to communicate according to the first transport mechanism and the 
second transport mechanism. 

6. (Currently Amended) The method of claim 1 wherein the rerouting all message 
traffic includes directing the filter complex from a networi^ management server in 
communication with the filter complex, the networi^ management server operable to 
send a reroute message to the filtering complex. 

7. (Original) The method of claim 1 wherein directing further comprises directing a 
target node router serving the target node from the networl< management server, the 
networl( management server operable to send a redirect message to the target node 
router. 

8. (Original) The method of claim 6 wherein the reroute message is indicative of 
the filtering complex receiving message traffic according to the first transport 
mechanism intended for the target node via the target node router serving the target 
node. 

9. (Original) The method of claim 7 wherein the redirect message is indicative that 
the target router serving the target node is not to receive message traffic according to 
the first transport mechanism con^esponding to the target node. 

10. (Original) The method of claim 7 wherein the redirect message is indicative that 
the target node router serving the target node receives the desirable message traffic in 
the second transport mechanism corresponding to the target node. 

1 1 . (Original) The method of claim 1 wherein first and second transport mechanisms 
coexist on a common physical networic. 
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12. (Original) The method of claim 1 wherein first transport mechanism corresponds 
to a public access protocol adapted for communication via a plurality of dissimilar 
network switching devices. 

13. (Original) The method of claim 1 wherein the second transport mechanism 
corresponds to a virtual private network operable to encapsulate message packets of 
dissimilar protocols such that the encapsulated message packets are recognized by a 
routing protocol of the virtual private networi^. 

Claims 14-15. (Canceled) 

16. (Original) The method of claim 1 wherein rerouting all message traffic is a static 
route, according to the first transport mechanism, from a single router serving the target 
node to the filter router serving the filter complex. 

17. (Cun-ently Amended) The method of claim 1 wherein receiving an indication 
further comprises detecting a recognizable pattern of inundating undesirable message 
traffi c i n quantity ouffioiont to bo rocognizod . 

18. (Original) The method of claim 1 wherein the undesirable message traffic 
emanates from a plurality of sources, each of the plurality of sources independently 
contributing substantially insignificant volume of message traffic. 

19. (Currently Amended) A network management server for redirecting undesirable 
message traffic comprising: 

a network intrusion detector monitor operable to receive an indication of 
undesirable message traffic directed to a particular target node via a first transport 
mechanism in a communications network; 
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a routing processor operable to propagate routing information from a routing 
table database t o reroute all message traffic using the first transport mechanism 
directed to the particular target node; and 

a connection to a filter complex responsive to the ferouting processor, the filter 
complex operable to distinguish desirable message traffic from undesirable message 
traffic, and further operable to transmit, via a second transport mechanism over the 
communications network, the desirable message traffic to the target node , the filter 
complex operable to reroute all message traffic including propagating, via a standard 
protocol corresponding to the first transport mechanism, a node address other than the 
node address corresponding to the target node, the routing processor operable to direct 
the filter complex to propagate routing information according to a predetermined 
protocol, the routing information operable to designate the target node as the 
destination of the message according to the second transport mechanism . 

20. (Cunrently Amended) The network management server of claim 19 wherein the 
filtering complex is further operable to filter the message traffic to subdivide the 
desirable message traffic from the undesirable message traffic. 

21 . (Original) The networi< management server of claim 1 9 wherein the filter 
complex further comprises a security filter having filtering logic for perfonming filtering, 
the security filter operable to parse the message traffic and identify sequences in the 
message traffic indicative of undesirable message traffic. 

22. (Original) The networi< management server of claim 21 wherein the filter 
complex further includes a filter routing device in communication with other routing 
devices in the communications network and coupled to the security filter to analyze 
message traffic. 
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23. (Currently Amended) The network management server of claim 2243 wherein 
the filter routing device in the filtering complex is operable to communicate according to 
the first transport mechanism and the second transport mechanism. 

24. (Currently Amended) The network management server of claim 1 9 wherein the 
network management server is operable to send a reroute message to the filtering 
complex, in response to which the filter complex is operable to reroute the message 
traffic. 

25. (Original) The network management server of claim 1 9 wherein the routing 
processor is further operable to direct a target node router serving the target node from 
the network management server, the network management server operable to send a 
redirect message to the target node router. 

26. (Original) The network management server of claim 24 wherein the routing 
processor is further operable to send a reroute message is indicative of the filtering 
complex receiving message traffic accordance to the first transport mechanism intended 
for the target node via the target node router serving the target node. 

27. (Original) The network management server claim 25 wherein the routing 
processor is further operable to send a redirect message indicative that the target router 
serving the target node is not to receive message traffic according to the first transport 
mechanism conresponding to the target node. 

28. (Original) The network management server claim 25 wherein the redirect 
message from the routing processor is further indicative that the target node router 
serving the target node receives the desirable message traffic in the second transport 
mechanism corresponding to the target node. 
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29. (Original) The networic nnanagement server of claim 19 wherein a network 
interface in the network management server is compatible with the fii^t and second 
transport mechanisms and wherein first and second transport mechanisms coexist on a 
common physical network. 

30. (Original) The network management server of claim 1 9 wherein first transport 
mechanism is operable according to a public access protocol adapted for 
communication via a plurality of dissimilar networt< switching devices. 

31 . (Original) The networi^ management server of claim 19 wherein the second 
transport mechanism is operable according to a virtual private network protocol 
operable to encapsulate message packets of dissimilar protocols such that the 
encapsulated message packets are recognized by a routing protocol of the virtual 
private network. 

32. (Original) The networi< management server of claim 1 9 wherein the filter 
complex is operable to reroute all message traffic including propagating, via a standard 
protocol corresponding to the first transport mechanism, a node address other than the 
node address corresponding to the target node. 

33. (Original) The network management server of claim 1 9 wherein the routing 
processor is operable to direct the filter complex to propagate routing infonnation 
according to a predetennined protocol, the routing Information operable to designate the 
target node as the destination of the message according to the second transport 
mechanism. 

34. (Cunrently Amended) The networi< management server of claim 194 - wherein the 
routing processor is operable to rerouting the message traffic according to a static route 
in the first transport mechanism, from a single router serving the target node to the filter 
router serving the filter complex. 
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35. (Original) The networi< management server of claim 19 wherein the undesirable 
message traffic emanates from a plurality of sources, each of the plurality of sources 
independently contributing substantially insignificant volume of message traffic. 

36. (Currently Amended) In a network management server of a networked system of 
data communications devices, a method for transparently intercepting, filtering, and 
rerouting message traffic for recovering from a distributed denial of service attack 
comprising: 

detecting, at a network monitor in the networi< management server, a pattem of 
inundating undesirable message traffic to a particular target node transported via a first 
transport mechanism in a communications network; 

receiving, via a routing processor, an indication of the undesirable message traffic 
directed to the particular target node; 

transmitting, via a networi( interface, a reroute message to a filter complex having a 
security filter operable to distinguish desirable message traffic from undesirable 
message traffic; and 

rerouting, via a filter routing device in the filter complex, all message traffic 
canried via the first transport mechanism in the communications network and directed to 
the particular target node; 

filtering, at the security filter, the message traffic to bifurucate desirable message 
traffic from undesirable message traffic; 

transmitting, via the networic Interface to a target node router serving the target 
node, a redirect message indicating that the target node router is to receive, via the 
second transport mechanism, the desirable message traffic directed to the particular 
target node and rerouted to the filter complex, the filter complex and the target node 
router conversant in the first transport mechanism and the second transport 
mechanism; and 

directing, from the networi< management server, the filtering complex to transmit, 
via a second transport mechanism over the communications network, the desirable 
message traffic to the target nod e, directing the filter complex furiiher comprising 
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propaqatina routing Information according to a predetemnined protocol, the routing 
infonmation operable to designate the target node as the destination of the message 
according to the second transport mechanism . 

37. (Currently Amended) A computer program product having a n encoded set of 
processor based instructions on a computer readable medium operable to store 
computer program logic embodied in computer program code encoded thereon for 
directing a processor to perform steps for fop-redirectina network message traffic 
comprising: 

computer program code for receiving an indication of undesirable message traffic 
directed to a particular target node via a first transport mechanism in a communications 
network; 

computer program code for rerouting all message traffic earned via the first 
transport mechanism in the communications network and directed to the particular 
target node, to a filter complex operable to distinguish desirable message traffic from 
undesirable message traffi c, rerouting all message traffic further comprising 
propagating, via a standard protocol conespondino to the first transport mechanism, a 
node address other than the node address corresponding to the target node : and 

computer program code for directing the filtering complex to transmit, via a 
second transport mechanism over the communications network, the desirable message 
traffic to the target node , the first transport mechanism and the second transport 
mechanis m having different sets of routing tables, directing the filter complex further 
comprising propagating routing infomiation according to a predetermined protocol, the 
routing information operable to designate the target node as the destination of the 
message according to the second transport mechanism . 

38. (Currently Amended) An encoded set of processor based instructions tangible 
encoded o n a computer readable medium oomputor data oigna l embodying program 
code for redirecting network message traffic comprising: 
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program code for receiving an indication of undesirable message traffic directed 
to a particular target node via a first transport mechanism in a communications network; 

program code for rerouting all message traffic carried via the first transport 
mechanism in the communications network and directed to the particular target node, to 
a filter complex operable to distinguish desirable message traffic from undesirable 
message traffic; and 

program code for directing the filtering complex to transmit, via a second 
transport mechanism over the communications network, the desirable message traffic to 
the target nod e, the second transport mechanism conresoondina to a virtual private 
network operable to encapsulate message packets of dissimilar protocols such that the 
encapsulated message packets are recognized by a routing protocol of the virtual 
private network, means for directing the filter complex further comprises: 

means for propaoatinc routine infonnation according to a predetermined 

protocol, the routing information operable to designate the taroet node as the 

destination of the message according to the second transport mechanism . 

39. (Currently Amended) A network management server for redirecting undesirable 
message traffic comprising: 

means for receiving an indication of undesirable message traffic directed to a particular 
target node via a first transport mechanism in a communications network; 

means for rerouting all message traffic carried via the first transport mechanism 
in the communications network and directed to the particular target node, to a filter 
complex operable to distinguish desirable message traffic from undesirable message 
traffic; and 

means for directing the filtering complex to transmit, via a second transport 
mechanism over the communications network, the desirable message traffic to the 
target node , the second transport mechanism corresponds to a virtual private network 
operable to encapsulate message packets of dissimilar protocols such that the 
encapsulated message packets are recognized bv a routing protocol of the virtual 
private network . 



